Merge branch 'xiaorouji:main' into main

esaaprillia · Apr 28, 2024 · 2f100ec · 2f100ec
2 parents e145e15 + 6ba4338
commit 2f100ec
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 2 deletions.
diff --git a/luci-app-passwall2/luasrc/model/cbi/passwall2/client/type/sing-box.lua b/luci-app-passwall2/luasrc/model/cbi/passwall2/client/type/sing-box.lua
@@ -477,6 +477,13 @@ if singbox_tags:find("with_wireguard") then
 	o.default = "1420"
 	o:depends({ [option_name("protocol")] = "wireguard" })
 
+	o = s:option(Flag, option_name("wireguard_system_interface"), translate("System interface"))
+	o.default = 0
+	o:depends({ [option_name("protocol")] = "wireguard" })
+
+	o = s:option(Value, option_name("wireguard_interface_name"), translate("System interface name"))
+	o:depends({ [option_name("protocol")] = "wireguard" })
+
 	o = s:option(Value, option_name("wireguard_reserved"), translate("Reserved"), translate("Decimal numbers separated by \",\" or Base64-encoded strings."))
 	o:depends({ [option_name("protocol")] = "wireguard" })
 end

diff --git a/luci-app-passwall2/luasrc/passwall2/util_sing-box.lua b/luci-app-passwall2/luasrc/passwall2/util_sing-box.lua
@@ -277,8 +277,8 @@ function gen_outbound(flag, node, tag, proxy_table)
 				node.wireguard_reserved = #bytes > 0 and bytes or nil
 			end
 			protocol_table = {
-				system_interface = nil,
-				interface_name = nil,
+				system_interface = (node.wireguard_system_interface == "1") and true or false,
+				interface_name = node.wireguard_interface_name,
 				local_address = node.wireguard_local_address,
 				private_key = node.wireguard_secret_key,
 				peer_public_key = node.wireguard_public_key,

diff --git a/luci-app-passwall2/po/zh-cn/passwall2.po b/luci-app-passwall2/po/zh-cn/passwall2.po
@@ -1084,6 +1084,12 @@ msgstr "额外的对称加密密钥"
 msgid "Local Address"
 msgstr "本地地址"
 
+msgid "System interface"
+msgstr "系统接口"
+
+msgid "System interface name"
+msgstr "系统接口名称"
+
 msgid "Decimal numbers separated by \",\" or Base64-encoded strings."
 msgstr "用“,”隔开的十进制数字或 Base64 编码字符串。"
 

diff --git a/luci-app-passwall2/root/usr/share/passwall2/nftables.sh b/luci-app-passwall2/root/usr/share/passwall2/nftables.sh
@@ -710,10 +710,12 @@ add_firewall_rule() {
 		nft "flush chain inet fw4 PSW2_ICMP_REDIRECT"
 		nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip daddr @$NFTSET_LANLIST counter return"
 		nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip daddr @$NFTSET_VPSLIST counter return"
+		[ "${WRITE_IPSET_DIRECT}" = "1" ] && nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip daddr @$nftset_global_whitelist counter return"
 
 		[ "$accept_icmpv6" = "1" ] && {
 			nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip6 daddr @$NFTSET_LANLIST6 counter return"
 			nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip6 daddr @$NFTSET_VPSLIST6 counter return"
+			[ "${WRITE_IPSET_DIRECT}" = "1" ] && nft "add rule inet fw4 PSW2_ICMP_REDIRECT ip6 daddr @$nftset_global_whitelist6 counter return"
 		}
 
 		nft "add rule inet fw4 dstnat meta l4proto {icmp,icmpv6} counter jump PSW2_ICMP_REDIRECT"